Re: Secure Hadoop and non-secure HBase

2011-09-12 Thread Gary Helmling
Hi Eric, Glad that worked for you. We need to get some information on the security configuration into the HBase online docs. Let us know if you run into further problems. Gary On Sun, Sep 11, 2011 at 6:00 PM, Eric Yang ey...@hortonworks.com wrote: Hi Gary, This is exactly what I missed.

Re: Secure Hadoop and non-secure HBase

2011-09-11 Thread Todd Lipcon
Hi Eric, Could you please explain more fully what you mean by this? The daemons generally run using keytabs, not user credentials, and thus shouldn't need the explicit TGT Renewer, right? -Todd On Sun, Sep 11, 2011 at 11:04 AM, Eric Yang eric...@gmail.com wrote: Hi all, Hortonworks has a

Re: Secure Hadoop and non-secure HBase

2011-09-11 Thread Gary Helmling
Hi Eric, If you configure hbase.master.keytab.file hbase.master.kerberos.principal hbase.regionserver.keytab.file hbase.regionserver.kerberos.principal in your hbase-site.xml, then the master and region server processes should login from the keytab files on startup, as Todd mentions. It's also

Re: Secure Hadoop and non-secure HBase

2011-09-11 Thread Todd Lipcon
On Sun, Sep 11, 2011 at 11:04 AM, Eric Yang eric...@gmail.com wrote: Hi all, Hortonworks has a patch for secure append for Apache Hadoop 0.20.205 to work with HBase 0.90.x. A slight correction: I think you mean to say: Hortonworks employees have revisited their decision to -1 the work that

Re: Secure Hadoop and non-secure HBase

2011-09-11 Thread Eric Yang
Hi Gary, This is exactly what I missed. Without those settings in my hbase-site.xml, I saw these messages in regional server log file: 2011-09-09 17:28:14,172 WARN org.apache.hadoop.ipc.Client: Couldn't setup connection for hb...@test.example.com